diff --git a/make_caroots.sh b/make_caroots.sh
index f568d46..7106038 100755
--- a/make_caroots.sh
+++ b/make_caroots.sh
@@ -5,7 +5,8 @@ function make_caroots_pem {
 }
 
 function make_caroots_tsv {
-	find crt/common crt/$1 -iname *.crt -printf %f -exec openssl x509 -nameopt utf8 -subject -noout -in '{}' ';' 2>/dev/null | sed "s/\.crtsubject= /\t/g" | sort > tsv/$1-ca-roots.tsv
+	echo "SHA-256(Certificate)	CA Name" > tsv/$1-ca-roots.tsv
+	find crt/common crt/$1 -iname *.crt -printf %f -exec openssl x509 -nameopt utf8 -subject -noout -in '{}' ';' 2>/dev/null | sed "s/\.crtsubject= /\t/g" | sort >> tsv/$1-ca-roots.tsv
 }
 
 make_caroots_pem dodo
diff --git a/tsv/dodo-ca-roots.tsv b/tsv/dodo-ca-roots.tsv
index 03ad1a6..b02fd9e 100644
--- a/tsv/dodo-ca-roots.tsv
+++ b/tsv/dodo-ca-roots.tsv
@@ -1,3 +1,4 @@
+SHA-256(Certificate)	CA Name
 001686CD181F83A1B1217D305B365C41E3470A78A1D37B134A98CD547B92DAB3	C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority
 007E452FD5CF838946696DFE37A2DB2EF3991436D27BCBAB45922053C15A87A8	C=SI, O=POSTA, OU=POSTArCA
 00AB444ABD6BDBA33DA8DE569AC4ECDE326D1BE1A61442D5EEC3975A0C243F04	C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Certificados Notariales
diff --git a/tsv/mammoth-ca-roots.tsv b/tsv/mammoth-ca-roots.tsv
index 03ad1a6..b02fd9e 100644
--- a/tsv/mammoth-ca-roots.tsv
+++ b/tsv/mammoth-ca-roots.tsv
@@ -1,3 +1,4 @@
+SHA-256(Certificate)	CA Name
 001686CD181F83A1B1217D305B365C41E3470A78A1D37B134A98CD547B92DAB3	C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority
 007E452FD5CF838946696DFE37A2DB2EF3991436D27BCBAB45922053C15A87A8	C=SI, O=POSTA, OU=POSTArCA
 00AB444ABD6BDBA33DA8DE569AC4ECDE326D1BE1A61442D5EEC3975A0C243F04	C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Certificados Notariales
diff --git a/tsv/sabre-ca-roots.tsv b/tsv/sabre-ca-roots.tsv
index 03ad1a6..b02fd9e 100644
--- a/tsv/sabre-ca-roots.tsv
+++ b/tsv/sabre-ca-roots.tsv
@@ -1,3 +1,4 @@
+SHA-256(Certificate)	CA Name
 001686CD181F83A1B1217D305B365C41E3470A78A1D37B134A98CD547B92DAB3	C=US, O=Network Solutions L.L.C., CN=Network Solutions Certificate Authority
 007E452FD5CF838946696DFE37A2DB2EF3991436D27BCBAB45922053C15A87A8	C=SI, O=POSTA, OU=POSTArCA
 00AB444ABD6BDBA33DA8DE569AC4ECDE326D1BE1A61442D5EEC3975A0C243F04	C=ES, O=Agencia Notarial de Certificacion S.L. Unipersonal - CIF B83395988, CN=ANCERT Certificados Notariales